• 0 Posts
  • 61 Comments
Joined 11 months ago
cake
Cake day: August 16th, 2024

help-circle
  • It might help to know that Mark Twain was satirically using that word to juxtapose its offensive nature with Jim being the ONLY good adult in the book. It wasn’t simply “a product of it’s time” or anything like that.

    I’m not saying to belt it out loud and proud while reading the book, but at the very least Mark Twain was being deliberate on his usage of it and it wasn’t to be malicious and was in fact to highlight the humanity of Jim in the face of his oppression. Some will say that Twain fumbled on his execution by making Jim a characature of stereotypes, but, at least it was just mindless racism, for what that’s worth.

    ETA: To actually answer your question though “n-word” gives all the context you need, no need to say the word, it’s history is strong enough to be fully conveyed by “n-word” in almost all contexts when being spoken by a white person especially.


  • The security here is the WiFi password anything that connects to LAN gets a LAN vlan tag. but it’s not like anything that connects to any of the SSIDs can get the DHCP lease of some random device on any vlan cuz it got tagged before. Or am I missing something?

    That sounds accurate. I have all my devices assigned a specific IP address, based on their MAC address, but that’s only per-interface. The other interfaces aren’t aware of my assignments for each other.

    If I connect my phone to my LAN SSID, it’ll get its assigned IP, but if I connect it to the NOT [network of things, no internet access] SSID, it’ll get assigned a new address out of the DHCP pool because I haven’t assigned it an IP on that interface, until I assign it an IP. But, which VLAN it’s connected to will determine which IP its getting, and it still requires me to know the passwords for each SSID.

    I believe where you’re getting confused is that a some businesses (or homelabs) might use a RADIUS server which will be more like this: ONE_SINGLE_SSID-Broadcast -> Device connects -> RADIUS Server detects account/certificate/MAC -> RADIUS Server assigns interface -> Device connects to VLAN the RADIUS server granted it access to

    So, in that scenario, if the ONLY thing that’s being used to validate the access is the devices MAC address, just changing the MAC address will effectively grant a completely different level of access with nothing else changing. Most people in a homelab (and even plenty of larger businesses) aren’t running the infrastructure to do this though, they’re just effectively connecting a VLAN to a port and then that port can only be used to connect to that VLAN. They’re doing the same with the WiFi SSIDs where each SSID connects directly to the VLAN.

    Usually though, for places that are implementing the RADIUS server, they’ll also install a certificate on their devices and the certificate needs to be in place in order to get certain access otherwise the RADIUS server will authorize less permissive access or just won’t allow access at all. Or, it’ll also need a user to log in to gain additional access.

    For wired, the company may also implement port locking where the port will only allow a certain amount of MAC addresses to connect (presumably one unless there is also a VOICE VLAN with a phone being used, in which case it’d be two) where if you change your MAC address (or connect a different device), the port will lock and won’t power POE devices and won’t allow connectivity until an admin clears the lock. It’s possible that they may have multiple VLANs allowed on the port and client side you can change VLANs, but, this isn’t typically done on all ports, usually only on trusted ports or ports that need the multiple VLANs (my VM server for instance has access to a port that’ll allow multiple VLANs and I just enter the tag I need when I create the VM). This would be similar to your WiFi scenario, the port with the WAP connected to it will have access to multiple VLANs and then those WLANs just connect to the VLAN that they’re assigned to.

    TL;DR - Typically one wireless SSID connects to one VLAN and if you want to jump to the other VLAN you’d need to connect to the other SSID, so you still have the individual passwords protecting you. On wired, typically VLANs are assigned per port and you can’t jump between then, but where they aren’t, it should be in a planned way and not just every port having access to every VLAN. Bad implementations exist though, so, anything is possible.


  • Agreed & my problem with “least bad candidate” or “blue no matter who” is that someone like Trump is the inevitable outcome when that’s the only thing they’re running on. Many of us have been voting “the lessor of two evils” for our entire adult lives and all its done is continue allow the right to get even more batshit insane and then the Dems follow right behind, just being less crazy and happily taking advantage of minorities for votes (but, look at how they actually treat Trans people when it matters, all of a sudden it “doesn’t poll well” to continue treating them as people).

    They just expect to get votes because “we’re less shitty than the other candidate!” as if that’s the only thing that matters as they continue to give in to Republican whims at the slightest sign that actual work will need to be done to oppose them (can’t be too obstinate, ya know, you might offend the fascist voters you’re trying to court!)

    They had weeks of forewarning for Rowe vs Wade being overturned due to the leak and had NO PLAN at all to oppose them when the news dropped other than “give us some money so we can continue to do absolutely fucking nothing to fix this”, no unified message, nothing’. Say what you will about Republicans, but the second women and black people started being treated like people under the law, they started thinking to the future and were determined to make sure they could roll that back no matter how long it took.

    ETA: I’m not saying don’t vote or both sides are exactly the same. They’re not at all the same. One is clearly better than the other, but the one that’s ‘better’ won’t actually fight to keep you having rights and will only fight back just the minimum amount to keep donations rolling in from individuals while actively trying to court the rich and corporations for their donations instead and I really hate the lack of good options we have.


  • VMs can also be live migrated to another server in the cluster with no downtime and backups don’t need to take the VM down to do their thing. If in the future you want to move to physical hardware, you can use something like Clonezilla to back it up (not needed often, but still, something to consider).

    Both have their places, but those factors are the main ones that come into play of when I want to use a VM or LXC.





  • I despise the ones where it’s basically like “get on the bus, we’re having mandatory fun!” and then you get going and it won’t finish until 2 hours past your quitting time, but it’s totally cool, because it’s a good time!

    OTOH, I’m not at all interested in sports and I’ve had a good time going to a baseball game and once a company took me to an arcade which was a lot of fun. Alcohol provided by the company.

    For me, as long as quitting time stays quitting time, I’m more or less happy even if I don’t actually like the event, but if you keep me away from my family, I’m unhappy and I can’t imagine how pissed the people who pick up their kids from work/school/etc… must have been.





  • They’ve done this once before and walked it back.

    Out of that decision and the backlash came the metrics, so they’d be able to make informed decisions before depreciating something.

    Last time, I used Core (IIRC, it wasn’t even called Core back then) and was quite upset. Before they walked it back, I switched to the OS version and don’t really regret it. If their metrics now tell them that core isn’t worth supporting, it probably isn’t, but I definitely understand being upset about it.

    It definitely sucks that the system that’s supposed to be about giving users freedom and options is removing some.

    ETA: Backups also make this whole thing so much easier now. Back then, backing up and restoring core meant manually copying a bunch of files, but now, it’s a completely different and easier experience.




  • Weirdness: My Authentik instance had a PostgreSQL upgrade prerequisite in order to update it.

    I’d followed instructions 3-4 times completely unsuccessfully and had to keep reverting to backup.

    So, I gave up for a couple weeks and left it be in order to get over my frustration.

    Yesterday, I followed the instructions again. As far as I can tell, I did nothing different than I’d tried previously and it worked first try and then I was also able to upgrade Authentik.

    NOTE: The instructions aren’t exactly difficult! So, I don’t see how I’d have gotten it wrong!


  • I don’t like marijuana at all for myself (tried it twice with different methods of delivery) and found it to be extremely unpleasant.

    I don’t see why that should affect other people’s ability to choose for themselves to enjoy it or not though. Why should they go through rehab just for enjoying something that’s not negatively affecting them?

    If I’ve had pineapples personally negatively impact my life, should I get to say you can’t have any?





  • A lot of people don’t have a fully offline setup and still have at least some devices that talk to the cloud. If that’s the case, if they make any changes, HA has to also update in response to those changes, so they really can’t treat it as an ‘appliance’ that can just sit there.

    HA devs are also pretty frequently updating HA to make it better (better dashboards, better methods to create automations, etc…) and if you update at least every couple of months you’ll be able to adapt pretty easily.

    Mine will largely function without internet, at least it will for anything needed, but does still need WiFi, but, I still keep it up to date. They’re also constantly updating and adding services that it can tie into, so, keeping up to date adds a lot of features you may not have even known you needed/wanted.